right now the base name will only be used when AS runs with a security manager, thus the lazy computation of it, done only if needed